At Dante’s Workshop, we respect the privacy of our customers and website visitors and aim to handle personal information responsibly, securely and transparently.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, when it may be shared with third parties and what rights you may have in relation to your information.

This Privacy Policy applies when you visit dantesworkshop.com, place an order, contact us, request a quotation, submit a custom order inquiry or otherwise interact with Dante’s Workshop.

1. Who Is Responsible for Your Personal Information

For personal information collected through our website, orders and direct customer relationships, Dante’s Workshop acts as the data controller unless otherwise stated.

Dante’s Workshop operates from Hungary.

For privacy related questions or requests, you can contact us at: info@dantesworkshop.com

2. Personal Information We Collect

The information we collect depends on how you interact with Dante’s Workshop.

Information You Provide to Us

When you place an order, contact us, request a quotation, create an account or communicate with us, we may collect information such as:

• your name
• billing address
• shipping address
• email address
• telephone number
• company name and business information, where applicable
• order details
• products and services purchased
• information contained in your communications with us
• information and specifications provided for custom or personalized projects
• photographs, measurements, reference materials or other files voluntarily provided as part of a project or support request

Where a project requires additional information, we will only request information reasonably necessary to evaluate, manufacture, deliver, support or service the relevant product or project.

Payment Information

Payments are processed through independent third party payment providers.

Dante’s Workshop does not normally receive or store complete payment card information when payment is processed directly by an external payment provider.

We may receive transaction related information such as:

• payment status
• transaction identifiers
• payment method type
• billing details
• information required for accounting and order administration
• fraud prevention or security related information where relevant

Website and Device Information

When you use our website, certain technical information may be collected automatically.

This may include:

• IP address
• browser and device information
• operating system
• general location derived from technical information
• pages and products viewed
• referring website or source
• interactions with our website
• cookie and similar technology identifiers
• date and time of visits
• technical information relating to website performance and security

This information may be collected directly through our website or by service providers supporting analytics, security, advertising or other website functionality.

3. How We Use Personal Information

We use personal information only where we have an appropriate reason and legal basis to do so.

Personal information may be used to:

• process and fulfil orders
• manufacture Made to Order, personalized and custom products
• process payments and confirm transactions
• arrange packaging, shipping and delivery
• provide tracking information
• prepare invoices and other transaction documents
• communicate regarding an order or project
• answer customer service inquiries
• provide repairs, exchanges, technical assistance or after sales support
• prepare quotations and evaluate custom projects
• manage business and professional client relationships
• prevent fraud and protect our website, customers and business
• comply with accounting, tax and other legal obligations
• improve our website, services and customer experience
• understand how visitors use our website
• measure the effectiveness of marketing
• provide marketing communications where permitted
• provide personalized advertising where permitted and where the necessary consent has been obtained

We do not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by law.

4. Legal Bases for Processing

Where the General Data Protection Regulation or similar European data protection law applies, Dante’s Workshop may process personal information on the following legal bases.

Performance of a Contract

We process information where necessary to enter into or perform a contract with you.

This includes processing necessary to:

• process an order
• manufacture a product
• deliver an order
• communicate regarding a purchase
• provide agreed support or services
• prepare or perform an individually agreed project

Compliance With Legal Obligations

Certain information must be processed or retained to comply with legal requirements, including accounting, taxation, consumer protection and other applicable obligations.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

These interests may include:

• preventing fraud and misuse
• protecting our systems and business
• managing customer relationships
• handling legal claims
• improving business operations
• maintaining appropriate business records
• understanding the general performance of our website

Consent

Where required, we process information based on your consent.

This may include certain:

• analytics technologies
• advertising and tracking technologies
• marketing communications
• non essential cookies

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

5. Website Infrastructure and Payment Providers

The Dante’s Workshop website and online store are operated through our own website infrastructure.

To process online payments securely, we use independent third party payment service providers.

Depending on the payment method selected by the customer, these providers may process information necessary to authorize, complete and verify the transaction.

Payment providers may process information such as:

• name
• billing information
• payment method details
• transaction identifiers
• payment status
• fraud prevention and security information

Complete payment card details are not normally stored directly by Dante’s Workshop when the transaction is processed by an external payment provider.

These payment providers operate under their own privacy, security and regulatory obligations and may process personal information in accordance with their own privacy policies.

Depending on the selected payment method, payment services may be provided through payment platforms supporting card payments, digital wallets and other online payment methods.

Dante’s Workshop receives only the information reasonably necessary to confirm and administer the payment, fulfil the order, maintain accounting records and provide customer support.

6. Shipping and Logistics Providers

In order to deliver orders, we may share information necessary for shipment with logistics and delivery providers.

This may include:

• customer name
• delivery address
• telephone number
• email address
• shipment information
• information required for customs or international delivery

Depending on the shipment, these providers may include FedEx, GLS, DPD or another carrier specifically arranged for the order.

For international shipments, information may also need to be provided to customs authorities, customs brokers or other parties involved in lawful import and export processing.

Only information reasonably necessary for shipment, delivery and related legal requirements is provided.

7. Analytics and Website Performance

We may use analytics tools to understand how visitors use our website and to help us improve website performance, navigation and customer experience.

Analytics information may include:

• device information
• website interactions
• approximate location information
• traffic sources
• session information
• pages and products viewed
• other website usage information

Where consent is legally required for analytics technologies, such technologies will be subject to the customer’s cookie and privacy choices.

8. Advertising and Marketing

Dante’s Workshop may use online advertising and marketing services to promote our products and understand the effectiveness of advertising campaigns.

Depending on the services enabled on the website, advertising providers may receive information about website interactions, device identifiers, cookie identifiers and interactions with advertising.

Where applicable law requires consent before advertising or tracking technologies can operate, these technologies are subject to the customer’s privacy and cookie preferences.

We may also send marketing emails where you have requested them, consented to receive them or where otherwise permitted by applicable law.

You may unsubscribe from marketing communications at any time using the unsubscribe option provided in the communication or by contacting us.

Transactional communications relating to an existing order, payment, shipment, support request or contractual relationship are not considered optional marketing communications and may still be sent where necessary.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small data files stored on or accessed from your device. They may be necessary for website functionality or may be used for additional purposes such as analytics and advertising.

Necessary Cookies

Certain cookies are necessary for the operation of the website and online store.

These may support functions such as:

• shopping cart operation
• checkout
• account login
• security
• fraud prevention
• session management
• privacy preference storage

These technologies may operate without optional consent where permitted because they are necessary to provide the website or a service requested by the user.

Optional Cookies

Analytics, advertising and other non essential technologies may be used subject to applicable consent requirements.

Where required, you can accept, reject or manage these technologies through the cookie controls available on our website.

Rejecting optional cookies should not prevent the basic operation of the store, although certain optional functions or personalization features may be limited.

You can also manage cookies through your browser settings.

10. Sharing Personal Information

Dante’s Workshop does not disclose personal information unnecessarily.

We may share information with third parties where reasonably necessary for the purposes described in this Privacy Policy, including:

• payment processors
• shipping and logistics providers
• hosting and technical service providers
• analytics providers
• advertising and marketing providers
• accounting and professional service providers
• fraud prevention and security providers
• government authorities, courts, regulators or law enforcement where legally required

Service providers receive only the information reasonably necessary for the relevant service, subject to their roles, contractual obligations and applicable law.

We may also disclose information where reasonably necessary to establish, exercise or defend legal claims or protect the rights, property or security of Dante’s Workshop, our customers or others.

11. Sale of Personal Information

Dante’s Workshop does not sell personal information for monetary consideration.

Certain analytics, advertising or website technologies may involve disclosures of technical or interaction data to third party providers.

Under some privacy laws, particular forms of advertising related disclosure may have a broader legal definition and may be considered “sharing” or a “sale” even where no personal information is sold for money.

Where applicable law grants a right to opt out of such processing, appropriate privacy controls will be provided where required.

12. International Data Transfers

Some of our service providers operate internationally and may process personal information outside Hungary or the European Economic Area.

This may include payment, hosting, analytics, advertising, technical or logistics service providers.

Where European data protection law applies and personal information is transferred outside the European Economic Area, such transfers will be carried out using an applicable lawful transfer mechanism or safeguard where required.

These safeguards may include adequacy decisions, standard contractual clauses or other mechanisms recognized under applicable data protection law.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to fulfil contractual obligations and comply with legal, accounting, taxation, warranty, dispute resolution and record keeping requirements.

Retention periods therefore depend on the type of information and the reason it is held.

For example:

• order, invoice and transaction information may be retained for the period required by applicable accounting and taxation laws
• customer and project communications may be retained while necessary to fulfil an order, provide support, maintain relevant project history or resolve potential disputes
• custom project documentation may be retained where reasonably necessary for future servicing, repair, reproduction, maintenance or continued support
• marketing information may be retained until consent is withdrawn, an objection is made or the information is no longer required
• technical and analytics data may be retained according to the applicable service configuration and cookie settings

Where information is no longer required, it may be deleted, anonymized or otherwise securely disposed of, subject to applicable legal obligations.

14. Custom Projects and Long Term Support

Certain Dante’s Workshop projects involve individually developed products and long term professional support.

For these projects, information relating to the customer, product configuration, technical specifications, manufacturing history, service history and project communications may need to be retained for longer periods where this is reasonably necessary to provide ongoing repair, maintenance, warranty, lifecycle or technical support.

For professional and business projects, additional data processing arrangements may also be established as part of a separate contract.

15. Data Security

We use reasonable organizational and technical measures intended to protect personal information against unauthorized access, loss, alteration, misuse or disclosure.

We also rely on professional payment, hosting, infrastructure and other service providers for services requiring specialized security.

However, no internet based service or electronic storage system can guarantee absolute security.

Customers are responsible for maintaining the confidentiality of their own account credentials and should contact us if they believe their account or personal information has been compromised.

16. Automated Decision Making and Fraud Prevention

Our payment and website infrastructure may use automated systems to identify potentially fraudulent, suspicious or high risk transactions.

These systems may evaluate technical, payment and transaction related information.

Dante’s Workshop does not independently use fully automated decision making that produces legal or similarly significant effects on customers without appropriate safeguards where such safeguards are required by law.

Third party platforms and payment providers may operate their own fraud prevention systems under their respective privacy policies.

17. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

Under the GDPR, these may include the right to:

• request access to your personal information
• request correction of inaccurate information
• request deletion of information where legally applicable
• request restriction of processing
• object to certain processing
• receive certain information in a portable format
• withdraw consent where processing is based on consent
• lodge a complaint with a competent data protection authority

These rights are subject to the conditions and limitations provided by applicable law.

For example, a request for deletion does not require us to delete information that we are legally required to retain for accounting, taxation, legal claims or other mandatory purposes.

To exercise a privacy right, please contact: info@dantesworkshop.com

We may request reasonable information necessary to verify your identity before completing a privacy request.

18. Hungarian Data Protection Authority

If you believe your personal information has been processed unlawfully, you also have the right to lodge a complaint with a competent supervisory authority.

For Dante’s Workshop in Hungary, the supervisory authority is:

Hungarian National Authority for Data Protection and Freedom of Information
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

1055 Budapest
Falk Miksa utca 9–11.
Hungary

Email: ugyfelszolgalat@naih.hu

You may also have the right to contact another competent supervisory authority depending on your place of residence or the circumstances of the processing.

19. Children

Our website and products are not directed specifically at children, and we do not knowingly seek to collect personal information from children for marketing purposes.

Where a person is not legally capable of entering into a purchase or other agreement independently, any transaction must be made in accordance with applicable law and, where required, through or with the authorization of a parent or legal guardian.

If you believe that personal information relating to a child has been provided to us improperly, please contact us.

20. Business Customers and Professional Contacts

Where we communicate with companies, organizations or other professional clients, we may process professional contact information relating to employees, representatives, contractors or other contact persons.

This may include:

• names
• professional email addresses
• telephone numbers
• job roles
• company information
• project related communications
• quotation and contractual information

Such information may be processed as necessary to establish and manage the relevant business relationship, prepare quotations, perform contracts, provide support and maintain appropriate business records.

21. Legal Requests and Protection of Rights

We may preserve or disclose personal information where reasonably necessary to:

• comply with applicable law
• respond to a legally valid request from a competent authority
• comply with a court order
• establish, exercise or defend legal claims
• investigate fraud or misuse
• protect the rights and security of Dante’s Workshop, our customers or third parties

We will not voluntarily disclose customer information to authorities or third parties without an appropriate legal or legitimate basis for doing so.

22. Changes to This Privacy Policy

We may update this Privacy Policy when our services, website, technology providers, data processing practices or applicable legal requirements change.

The current version will be published on this page together with its latest revision date.

Material changes may be communicated separately where required by applicable law.

23. Contact

If you have any questions about this Privacy Policy, how your personal information is handled or if you wish to exercise a privacy right, please contact:

Dante’s Workshop

Email: info@dantesworkshop.com